You have a single Active Directory directory service forest named contoso.com. You create baseline  security settings for a group of computers， and you store the settings in a database. You deploy thebaseline security settings. You need to confirm that the security settings on one of the computers are  applied correctly. 
What are two possible commands that you can run to achieve this goal？（）

单项选择题You are the network administrator for your company. The network consists of a single Active   Directory domain that contains four domain controllers. All servers run Windows Server 2003. All user  accounts are located in an organizational unit （OU） named CompanyUsers. A written company policyrequires all users to use strong passwords. User passwords must contain a mixture of letters， numbers， or  special characters. Passwords must be at least 10 characters long. Passwords must be changed at least  every 60 days， and the new password cannot be the same as the old one. To enforce this requirement，  you create a Group Policy object （GPO） named Password Policies and link the GPO to the  CompanyUsers OU. The settings in the Password Policy section of the Password Policies GPO are  shown in the exhibit. （Click the Exhibit button.） You discover that users are creating simple passwords that  do not meet the complexity requirements. You need to ensure that the company password requirements  are enforced.  What should you do？（）

A. Link the Password Policies GPO to the Domain Controllers OU. Make it the first GPO in the list.
B. Configure the properties of the Password Policies GPO so that it cannot be overridden.
C. Delete the Password Policies GPO. Edit the Default Domain Policy GPO to include the settings from the Password Policy section of the Password Policies GPO.
D. Delete the Password Policies GPO. Edit the Default Domain Controllers Policy GPO to include the settings from the Password Policy section of the Password Policies GPO.

单项选择题You have a single Active Directory directory service domain. You plan to use a server named Server1  to deliver Microsoft updates to all your companys workstations. The workstations are located in an  organizational unit （OU） named Workstations. Server1 is located in an OU named Servers. You need to  ensure that all workstations receive Microsoft updates from Server1 and that the updates are installed at  3：00 AM each day.  What should you do？（）

A. Create a GPO and enable the Configure Automatic Updates and Enable recommended updates via    automatic Updates options. Link the GPO to the Workstations OU.
B. Create a GPO and enable the Configure Automatic Updates and Automatic Updates detection frequency options. Link the GPO to the Workstations OU.
C. Create a GPO and enable the Configure Automatic Updates and Specify intranet Microsoft update service location options. Link the GPO to the domain.
D. Create a GPO enable the Configure Automatic Updates and Specify intranet Microsoft update service location options. Link the GPO to the Servers OU.

单项选择题You have a single Active Directory directory service domain. All users in the IT department are  placed into an organizational unit （OU） named IT Users. A Group Policy object （GPO） is linked to the IT  Users OU. The GPO assigns a software installation package to install the Windows Server 2003  Administration Tools Pack. You select the Install this application at logon option in the software installation  package. A user has been removed from the IT Users OU， but she still has the Windows Server  Administration Tools Pack on her computer. You need to ensure that the Windows Server 2003  Administration Tools Pack is removed from a users computer when the user is moved from the IT Users  OU.  What should you do？（）

A. Modify the software installation package to use the Published deployment method. Clear the Auto-install this application by file extension activation check box. Redeploy the software installation package.
B. Modify the software installation package to clear the Install this application at logon option. Redeploy the software installation package.
C. Modify the software installation package to select the Uninstall this application when it falls out of the scope of management option. Retain the software installation package in the GPO.
D. Modify the software installation package to select the Uninstall this application when it falls out of the scope of management option. Delete the software installation package from the GPO.

多项选择题You are the network administrator for Southridge Video. The network consists of a single Active  Directory domain named southridgevideo.com. The domain contains one domain controller. All servers  run Windows Server 2003. All client computers run Windows XP Professional. The company uses Group  Policy objects （GPOs） to configure user and computer settings. The Active Directory database and the  SYSVOL shared folder are stored on separate hard disks. The hard disk containing the SYSVOL folder  fails. Some Group Policy settings are still applied， but new users do not receive the Group Policy settings. You replace the failed disk. You discover that there are no valid backups of the SYSVOL folder. You have  a list of GUIDs and friendly names for each GPO. On the new disk， you create a new shared folder named  SYSVOL in the same location as the previous SYSVOL folder. You need to configure the network so that the user and computer settings will be applied to all users.  Which three courses of action should you take？（）

A. In the SYSVOL folder， create a folder named southridgevideo.com. In the southridgevideo.com folder， create a folder named Policies.
B. In the SYSVOL folder， create a folder named System State. In the System State folder， create a folder named Policies.
C. In the Policies folder， create a folder for each GPO. Name the folders by using the friendly name of each GPO. In the folder for each GPO， create a folder named MACHINE and a folder named USER.
D. In the Policies folder， create a folder for each GPO. Name the folders by using the GUID of each GPO. In the folder for each GPO， create a folder named MACHINE and a folder named USER.
E. Use Active Directory Users and Computers to open each GPO. Close each GPO without changing any settings.
F. Use Active Directory Users and Computers to open each GPO. Change at least one setting in each GPO before closing it.

单项选择题You have a single Active Directory directory service domain with three domain controllers named  DC1， DC2， and DC3. All FSMO roles are held on DC1. All domain controllers are global catalog servers.   Several users are experiencing logon times that are longer than normal. All users are authenticating with   DC1 and DC3. The DC2 logs display error messages indicating that the Active Directory database  partition is out of free space. You need to ensure that Active Directory is accessible on DC2. You add a  500-GB hard disk to DC2， back up the system state data， and restart DC2 in Directory Services Restore  Mode.  What should you do next？（）

A. Use Windows Explorer to move ntds.dit to the new hard disk.
B. Use the Ntdsutil tool to move ntds.dit to the new hard disk.
C. Create a new application directory partition.
D. Perform an authoritative restore of Active Directory.